Skip to content

Update vulnerabilities #26696

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
obohaciak wants to merge 1 commit into from
Closed

Update vulnerabilities #26696

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -63,6 +63,12 @@ RUN ./scripts/install_full.sh && python ./scripts/trim_sdk.py \
)" \
&& apk add --virtual .rundeps $runDeps

# update vulnerabilities
RUN apk upgrade openssl
RUN apk upgrade binutils --repository=http://dl-cdn.alpinelinux.org/alpine/edge/main
Comment on lines +67 to +68
Copy link
Member

@jiasli jiasli Jun 19, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is not a universal solution as they are only specific to certain versions of Alpine Linux image. Alpine Linux will include these fixes in its new docker image. We also automatically pick up the latest Alpine Linux image:

azure-cli/Dockerfile

Line 8 in 5f52c83

FROM python:${PYTHON_VERSION}-alpine

RUN pip install cryptography -U
RUN pip install requests -U
Comment on lines +69 to +70
Copy link
Member

@jiasli jiasli Jun 19, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This will be covered by #26671.


WORKDIR /

# Remove CLI source code from the final image and normalize line endings.
Expand Down